Classical simulation of measurement-based quantum computation on higher-genus 

surface-code states 
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We consider the efficiency of classically simulating measurement-based quantum computation on 
surface-code states. We devise a method for calculating the elements of the probability distribu- 
tion for the classical output of the quantum computation. The operational cost of this method is 
polynomial in the size of the surface-code state, but in the worst case scales as 2 2s in the genus 
g of the surface embedding the code. However, there are states in the code space for which the 
simulation becomes efficient. In general, the simulation cost is exponential in the entanglement 
contained in a certain effective state, capturing the encoded state, the encoding and the local post- 
measurement states. The same efficiencies hold, with additional assumptions on the temporal order 
of measurements and on the tessellations of the code surfaces, for the harder task of sampling from 
the distribution of the computational output. 



I. INTRODUCTION 

A major open problem in quantum computation is to 
determine the physical properties of quantum systems 
that account for the quantum speedup over classical com- 
putation. This would aid in the development of useful 
quantum computational systems, and constitute a sig- 
nificant leap forward in our understanding of quantum 
physics. 

One approach to studying this problem is to find in- 
stances of quantum computational processes that can 
be simulated efficiently on a classical computer, and 
identify which quantum mechanical properties they lack. 
There are three known examples in this category; namely 
quantum circuits composed of Clifford gates |l| , match- 
gate circuits @], [|| (which can be mapped to non- 
interacting fcrmions jj]), and quantum evolutions in 
which the entanglcmcnt-as quantified by an appropriate 
monotone-always remains small [f|, @- 

Specifically, it was shown in [f| that any circuit model 
quantum computation can be classically simulated with 
a number of steps that grows polynomially in the num- 
ber of qubits, but exponentially in an entanglement mea- 
sure x- Therein, \ is the log of the maximum value 
of the Schmidt rank across any bipartition of the set of 
qubits, at any point of the computation. This result has 
counterparts in measurement-based quantum computa- 
tion (MBQC) 0, Q. However, such results relating the 
amount of entanglement present in a quantum system to 
the hardness of its classical simulation need to be taken 
with a grain of salt: they do not hold for all entanglement 
measures. Specifically, they do not hold for sufficiently 
continuous entanglement measures 0. Also note that 
quantum states can be too entangled to be useful for 

MBQC 0, 0. 

In this paper we describe a classical simulation method 
for quantum systems that combines the fermionic or 
matchgate method with that for slightly entangled quan- 
tum systems. To this end, we consider the classical simu- 
lation of MBQC where the initial resource state is a state 



in the code space of the surface code. The originally 
intended application for surface codes is fault-tolerant 
quantum computation in two-dimensional local architec- 
tures with constrained interaction range 0], 0]- Re- 
garding the potential use of surface-code states as re- 
sources in MBQC, it was previously shown that for such 
states with a planar topology the resulting quantum com- 
putation can be efficiently classically simulated 0] , 0] . 



Here, we extend this investigation to surface-codes em- 
bedded in surfaces of higher genus. This problem is re- 
lated to, but not the same as matchgate contraction 0] 
and computing the Ising model partition function (l7j on 
higher genus graphs. We focus initially on the computa- 
tion of the probability of obtaining any single sequence of 
MBQC measurement outcomes, starting from a surface- 
code state. Our results arc that: (1) In the worst case 
this can be done with a cost that scales polynomially in 
the size of the resource, but exponentially in the genus. 
(2) For any genus g the code space has a basis such that 
for each basis state the computation is efficient, and (3) 
There exists an effective state | $) constructed out of the 
code, the encoded state and the post-measurement unen- 
tangled state such that the cost of classically simulating 
MBQC is exponential in the entanglement of | $) . By spe- 
cializing to a specific family of higher genus graphs and 
ordering of measurements, we are able to extend these 
efficiencies to the harder task of sampling from the prob- 
ability distribution over MBQC outcomes. 



The remainder of this paper is organized as follows. 
In Section II, we define the surface code on tessellations 
of surfaces of genus g. In Section III, we introduce the 
notions of classical simulation to be used in this paper. 
In Section IV, we present a method for pointwise evalu- 
ating the output distribution of MBQC. In Section V we 
discuss the efficiency of evaluating partial measurement 
probabilities, in order to efficiently sample from the out- 
put distribution. We conclude in Section VI. 
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FIG. 1: The stabilizer group of the surface code is generated 
by an X-type operator around the boundary of every face, 
and a Z-type operator on the set of edges incident on every 
vertex. 



II. THE SURFACE CODE 

A. Definition 

To define the surface code, we first introduce the no- 
tion of a graph embedded on a surface. See [lH for a de- 
tailed introduction. In this paper, we consider closed, ori- 
cntable surfaces S of genus g. Given a graph G = (V, E), 
we say that G is embedded on S when G is drawn on S 
with no edge crossings. The surface S (minus the im- 
age of the embedding) is partitioned by the graph into 
disjoint regions called faces, which are separated from 
one another by the curves representing edges of G. The 
set of faces is denoted as F, and for any f £ F, df de- 
notes the boundary of /, which is the set of edges which 
separate / from other faces. For any vertex v £ V, we 
let Sv denote the set of edges that are incident upon v 
in G. We consider here so-called cellular embeddings, 
which have the property that each face is homeomorphic 
to an open disk. For a graph G cellularly embedded on 
a closed, orientable surface of genus g, Euler's formula 
holds: \E\ - |F| - |F| = 2 - 2g. When using the term 
graph, we allow for self-loops and redundant edges (what 
some authors call a multigraph), unless explicitly stated 
otherwise. 

Consider a graph G cellularly embedded on an ori- 
entable surface S: G = (V,E,F), where G is connected. 
We associate a qubit with each edge e £ E. The surface 
code is a stabilizer code with stabilizer generators fl9j: 

A v := JJ Z e Wv£ V, 

e^Sv 

B f := I] X - V/ e F. 

e&df 

The code space CS is defined as the joint +1 eigenspace 
of all of the stabilizer generators 

CS := : A v \i>) = B f \1>) = |V) Vv £ V, f £ F}. 

The stabilizers all commute, because for any v £ V 
and f £ F, Sv and df always have an even number of 
edges in common. If G contains any self-loops, then the 



corresponding edge qubit will be disentangled from the 
rest for any state \ip) £ CS, and in the +1 X eigenstate. 
We neglect any such qubit and assume that G contains 
no self-loops. 

For each of the two types of stabilizer generator, any 
single one can be written as a product of all of the others. 
Thus, there are \V\ + \F\ — 2 independent, commuting 
stabilizer generators. It follows from Euler's formula and 
the theory of stabilizer codes [2(| that the dimensionality 
of CS is 2 2g , so the surface code allows for the encoding 
of 2g logical qubits. 



B. Encoded Pauli operators 

We now seek 2g encoded Pauli X operators Xj and 
encoded Pauli Z operators Zj for j = 1...2g. To do so, 
we shall introduce a few more notions from topological 
graph theory. A cycle C is a set of edges such that every 
vertex has an even number of edges incident upon it from 
C [2l|. The symmetric difference of any two cycles C\ 
and C2 is also a cycle, which we shall refer to as the sum 
of C\ and C?,. A cycle is called trivial if it can be ob- 
tained as the sum of the boundaries of some set of faces. 
Two cycles are called homologous on G if their sum is a 
trivial cycle. This equivalence relation divides the set of 
all cycles on G into homology classes of mutually homol- 
ogous cycles. The set of homology classes forms a group 
under addition, called the first homology group. Each 
handle in a surface S contributes two independent gen- 
erators to the first homology group, which is isomorphic 
to l? a . Intuitively, the two generators can be thought of 
as the cycles that go around the handle, and the cycles 
that go through it. 

An operator of the form X = Yieec X e f° r an y cycle 
C will commute with all of the stabilizer generators of 
the surface code. If C is a trivial cycle, then X is equal 
to a product of some set of Bf operators, and thus acts 
trivially on the code space. With this in mind, we define 
the encoded X operators as Xj — Yieec -^ e ' where {Cj} 
is a set of 2g nontrivial cycles, which are homologically 
independent. By homologically independent, we mean 
that no non-trivial linear combination of the cycles {Cj} 
is homologically trivial. This ensures that the Xj all act 
independently on CS while commuting with the stabilizer 
generators. 

To define the encoded Pauli Z operators, we use the 
same construction, but on the dual graph. For an embed- 
ded graph G = (V, E, F), its dual graph G swaps the roles 
of vertices and faces. That is, for each face in the original 
graph we associate a vertex of the dual graph. Two ver- 
tices in G are then connected by an edge iff the associated 
faces of G share an edge. If an edge e £ E is contained 
entirely within a single face of G, rather than separating 
two distinct faces, then we draw a self-loop in G for e. A 
cycle C on G is called a cocycle on G, and has the prop- 
erty that C C E : \C n df\ = (mod 2) V/ G F. The 
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FIG. 2: (Color online) A square toroidal graph (g = 1), 
depicted on a plane. The torus is reconstructed by 
identifying the points marked with diamonds, as well as the 
points marked with squares. See text for definitions of the 
cycles and cocycles shown. 



dual of an embedded graph has a natural embedding on 
the same surface S as the original graph, where we place 
each vertex of G in the center of the associated face of G 
fl8| . Thus, there are also 2 2g distinct homology classes 
of cocycles on G, where homology is defined with respect 
to the dual graph embedding. A cocycle on G is trivial 
if it can be written as S v for some set of vertices 

V C V. We define the encoded Pauli Z operators as 
Zj = YieeC ^e, where {C'j} is a set of 2g homologically 
independent nontrivial cocycles. To ensure that each en- 
coded X operator anticommutes with the encoded Z op- 
erator for the same logical qubit, but commutes with the 
Z operator for other logical qubits, we must choose the 
Cj and C'j such that \Cj D C' k \ = 6 jk (mod 2). Figure [2] 
depicts such a choice of "encoding cycles" and cocycles 
for a square toroidal graph. 

An algorithm to find a suitable set of cycles Cu and 



cocycles C' k satisfying the above criteria - as well as a 
guarantee of their existence - is provided by the notion 
of a tree-cotree decomposition for an embedded graph 
introduced by Eppstein 



and C 3 n C' k = for k ^ j. The 
cycles T{X) are also homologically independent (and by 
corollary likewise for the cocycles C(X)) [23|]. Thus, a 
tree-cotree decomposition always provides a suitable def- 
inition for the encoded operators of the surface code. 



C. The surface-code space 

Now that we have defined encoded qubit operators, 
we can explicitly construct their eigenstates from the 
eigenstates of the physical Pauli Z operators. Let \x) = 
\x\...x\e\) for any \E\ component bitstring x be an eigen- 
state of the physical Z operators, with eigenvalue (— l) Xc 
for the operator Z e . The unique mutual +1 eigenstate of 
the 2g encoded Pauli X operators is 



= \K(G)) := 



1 



- ]T \x) 

V\ E o(G)\ xeEo{G) 



(1) 



where Eq (G) is the set of bitstrings corresponding to all 
cycles on G. We associate bitstrings over E and subsets 
of E in the natural way: x e = 1 iff e is in the sub- 
set. That the state |+) is stabilized by all of the A v 
operators follows from the fact that since £ is a cycle, 
A v \x) = (-l)\ xn5v \\x) = \x). |+) is stabilized by all of 
the Bf operators, because Bf\x) = \x © df), where © 
denotes mod 2 addition of bitstrings (or cquivalcntly, the 
symmetric difference of the associated sets). Since x(Bdf 
is also a cycle and bitwise addition is invertible, operating 
on |+) by Bf merely permutes the order of the symmet- 
ric summation over Eq(G) in Equation [TJ For this same 
reason, Xj\+) — |+) for all j = l...2g. 

From the state |+), we can construct the rest of the 
encoded X eigenbasis for CS by selective application of 
encoded Z operators. Letting a be any 2g component bit 
string oti...oi2g, the state 



\X a ) := 




(2) 



22|. For any connected graph ig th? encoded Pauli _ X eigenstate with eigenvalue (-1)°" 



G, there exists at least one spanning tree of G, which is 
defined as a subset of E that forms a tree (is connected 
and contains no non-null cycles) and visits every vertex 
in V . A spanning tree T C E contains | | — 1 edges. For 
any spanning tree T, there exists at least one set of edges 
G within the complement E\T of T in E such that G is 
a spanning cotree of G: that is, a spanning tree of the 
dual graph G. A spanning cotree contains |F| — I edges. 
For a cellularly embedded graph G, Euler's formula im- 
plies that the set of leftover edges X = E\(T U G) has 
a cardinality of 2g. For each edge e £ X, the subgraph 
with edges T U e contains exactly one cycle, which we 
will denote as T(e). Similarly, GU e contains exactly one 
cocycle G(e). If we label the edges in X arbitrarily as 
X = {ei..e2g} and define Cj := T(ej) and G' :— C(ej), 




for Xj. The states \X a ) provide an orthonormal basis for 
CS. because 



(XjlXa) — 



If 7j ^ cij for any j, then one can prove that 
(X^Xa) = — (Xy\X a ) = by inserting an Xj oper- 
ator into the above expression and anticommuting it 
past Zj. If on the other hand jj = etj for all j, then 
(XyjXa) = (+|+) = 1 as expected. 

The set Eq(G) appearing in Equation [1] is the so-called 
cycle space of G. From the definition of a cycle and Eu- 
ler's formula, one can determine the size of the cycle 
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space to be \E (G)\ = 2^'^ +1 = 2 2 9+l F l- 1 , assum- 
ing that G is connected (see Section IV Al for proof). The 
cycle space of G is a vector space over the binary field %2 
with a basis composed of all of the face boundaries except 
one, as well as any set of 2g homologically independent 
nontrivial cycles (such as the Gj). 



III. CLASSICAL SIMULATION OF MBQC ON 
SURFACE-CODE STATES 



In this section, we define our notions of classical sim- 
ulation of MBQC. A run of MBQC begins with putting 
in place a resource state |72), which in the context of 
the present paper is a state in the code space of a sur- 
face code. Subsequently, all qubits in the support of 
1 72.) are measured, where measurement bases are possibly 
adapted depending on the outcomes of earlier measure- 
ments. Finally, the classical output bits, collectively de- 
noted by the vector o, are computed as certain parities 
among measurement outcomes. The probability distri- 
bution for the various values of the output vector o is 
denoted as P, with P(o) the probability for the compu- 
tational outcome o. 

In this paper, we consider two notions of classically 
simulating MBQCs, namely 

1. Computing the elements P{o) of P exactly, for ar- 
bitrary output values o. 

2. Sampling from the probability distribution P. 

Consider the scenario where either a measurement-based 
quantum computer or a classical device simulating it is 
hidden behind a wall, and one is supposed to figure out 
the identity of the device merely by looking at its output . 

It is possible to distinguish the real quantum computer 
from a classical device efficiently simulating MBQC ac- 
cording to the first notion, e.g. by setting up a prob- 
lem where P(o) = S(o, m), for some m; i.e., a needle in 
a haystack. If the classical device could only compute 
P(o) efficiently for each o, it would still generally require 
exponential time in the length of o to find the correct 
output m. 

However, it is not possible to distinguish a quantum 
computer from a device efficiently simulating MBQC ac- 
cording to the second criterion, since the probability dis- 
tribution P fully characterizes the output of the com- 
putation. Indeed, the quantum computer itself samples 
from P 



24] 



The probability of obtaining a particular sequence 
of measurement outcomes on all of the \E\ qubits is 
| (72 10) | 2 , where \<p) is a tensor product of single qubit 
outcome states. In general, the ability to compute (72|</>) 
is sufficient for classical simulation of the first type, since 
the P(o) are all expressible in the form |(72|^)| 2 . Yet, 
the ability to compute a single such inner product ef- 
ficiently is not sufficient for efficient classical simulation 
via sampling from P, as the above example illustrates. It 



is possible however to efficiently sample from P if partial 
measurement probabilities 

KI^>)=M(^>Wb>) 

can be computed efficiently. Therein, E, E is a biparti- 
tion of the qubits E into a set of measured qubits E and 
unmeasured qubits E, and \<t>g) ■= ® e ^ E \4>e) is a post- 
measurement state on the measured qubits, representing 
the outcomes obtained. Consider a step of MBQC where 
the next qubit to be measured is some e S E. If one now 
computes p (\4>e) ® l^e)), then Bayes' formula yields the 
probability of obtaining \<j) e ) for qubit e, conditioned on 
the past measurement results: 



P 



(|<M | 10 



In this way, one can simulate MBQC by only sampling 
from distributions over two outcomes, one time for each 
qubit e e E. If p{\cj)~)) can be computed in a number 

of steps that scales polynomially in \E\, at each step E 
of the computation, then the whole simulation can be 
performed in poly(E) time. 

In our context, we will focus initially on the computa- 
tion of complete local state inner products (V>|<^), where 
\t/j) is a surface-code state, and \<j>) is a product state. 
We will then find in Section [V] that for a certain fam- 
ily of arbitrary genus graphs and a natural ordering of 
measurements, the task of computing partial measure- 
ment probabilities p (|0g)) reduces to a special case of 
evaluating (^l^). 



IV. PRODUCT STATE OVERLAPS AND 
ENTANGLEMENT 

A. Product state overlaps and the Ising model 

We will begin by showing that the inner product be- 
tween any surface-code state and an arbitrary product 
state can be written as a sum of classical Ising model 
partition functions. Consider any product state in the 
physical Hilbert space of the \E\ qubits: 



(a e |0) e + 6 e |l) e ) 



eeE 



The inner product between \<p) and the encoded X 
cigenstatc |+) of Equation [T] can be written as a sum- 
mation over the set E (G): 

{m = ^mm £ (*l((gK|o) e + Mi)e) 

V \^o{G)\ xeEo{G) \ eeE J 
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where if a e = for any edge e we take a limit as a e — >• 
and use the continuity of (+|^>) as function of the a e and 

b e . 

The state overlap in Equation [3] is proportional to the 
partition function of a classical Ising model with classi- 
cal spins a v € {0,1} on the vertices of G, and possibly 
complex couplings J e = tanh _1 (^) associated with each 
edge. It is well known (see 25 1 and [26j]) that the par- 
tition function of an Ising model defined on a graph G 
with couplings J e can be written as a generating function 
of cycles on G: 

Z(G, J) = 2l y l j Y[ cosh(Je) ) Cy(G, tanh(J)), (4) 



where 



Cy(G,w) 



e 

x£E (G) e€E 



is the generating function of cycles on G, where a weight 
w e is associated with each edge e. Comparing Equations 
[3] and [4j we see that if we define the Ising couplings as 
J e := tanh _1 (^), then 



UeeE V° 



2\v\y/\E^G)\ 



b 2 



(5) 



Now consider any state in the surface-code space, 
with expansion coefficients c 7 in the encoded X eigen- 
basis: = J2 7 e{o,i}<s 2 s c i\ t)' Expanding the inner 
product in this basis 



(V#> 




(0) 



Recall that the encoded Pauli Z operators are ten- 
sor products of Pauli Z operators acting on the physical 
qubits. If we take them as operating to the right rather 
than the left in Equation [6l then we see that each term 
is proportional to an inner product between |+) and a 



T 2 9 



modified product state := ^IIj=i 

could write Equation [6] as a summation over 2 2ff Ising 
partition functions, each with different Ising couplings 
defined from the coefficients of |</> 7 ). However, we will 
find it useful to keep each term in the form of Equation 

El 



7G{0,1}® 2 9 x£E (G)e£E V e 

J2 c;Cy(G,^), 

7G{0,1}« 2 9 



(7) 



= and bj is obtained from b e by let- 



where Af := — !— 

V\ E o(G)\ 

ting b e — > —b e each time the edge e belongs to a cocycle 
Cj such that jj = I. The weights w 1 are defined as 
wj := bj/a e . 



B. Evaluation of product state overlaps 

From Equation we see that in order to compute an 
inner product of the form {i^\<p), it is sufficient to be 
able to evaluate a generating function of cycles on G. 
Note that the generating function of cycles of a graph G 
depends only on its vertex and edge sets V and E, and 
makes no reference to an embedding of G on any surface. 
However, it turns out that embedding G on an orientable 
surface of genus g allows one to compute Cy(G, w) in a 
number of steps that grows exponentially in g, while only 
polynomially in the size of the graph. 

In Appendix \X\ we show that for a graph G embed- 
ded on an orientable surface of genus g, the generating 
function of cycles on G can be written as 



Cy(G,w) 



2<j 



£ (-f)^Pf(^'(^)), (8) 



:,/3e{0,l}®9 



where a-/3 is the bitwise inner product of the g component 
bitstrings a and /3, and Pi(A'(w)) is the Pfaffian of the 
weighted adjacency matrix of a modified graph G', which 
is obtained from the graph G with edge weights w. Here, 
w a '@ indicates the set of edge weights of G adjusted in a 
certain way that depends on the bitstrings a and /3. The 
Pfaffian of a matrix is related to the determinant and is 
computable in a number of steps that grows polynomially 
in the size of the matrix. The number of edges of G' is a 
polynomial in the number of edges of G, so Pf (*4'(u> Q ' /3 )) 
can be computed efficiently in both the number of edges 
and the genus g. Equation [5] allows for an evaluation of 
Cy(G,w) in poly (\E\,g)2 2 s steps. 

The construction of the adjusted edge weights w a 'P 
will be crucial in the following considerations. In Ap- 
pendix 13 wc define a canonical encoding scheme, which 
is a possible choice of encoding cocycles C' k defined by 
cutting and then unfolding the surface S into a topologi- 
cal disk. In a canonical encoding scheme, the numbering 
of cocycles G(...G2 9 is important; in particular, each odd 
numbered cocycle C^j— l ^ s P a i re d with an even numbered 



So we cocycle C' 2 y Given a canonical encoding scheme G(...G2 



2a ' 



w 



e'P is defined from w e by multiplying w e by — 1 each 
time e belongs to an odd numbered cocycle G 2 j_! such 
that ctj = 1, and each time e belongs to an even num- 
bered cocycle C' 2 j such that (3j = 1. 

Consider now the coefficients c 7iP of an encoded state 
with respect to a canonical encoding scheme C' k , where 
7,p€ {0, l}® 9 , 7j corresponds to the odd numbered co- 
cycle C 2 j_i, and pj to the even numbered cocycle C' 2 j- 
Then we may re- write Equation [7] as 



®\4>)=M 



E 

7,pe{o,i}®9 



C ; p Cy(G>^). 



The bitstrings 7, p modify the edge weights w e here in 
exactly the same way as the bitstrings a, ft do in Equation 
[5] So substituting in Equation [5J 



where © indicates here the binary sum of two bitstrings. 
By re-labelling the summation over the dummy indices 
a, /3, we can rewrite 

<v#> = ^ E c ;, P (-i) (Qe7H/3ffip) pf(^'K^)), 

e{o,i}® 9 

(9) 

where AT is as defined in Section [IIII Equation |9] provides 
a means of computing {ip\4>) in a number of steps that 
scales as poly(\E\, g)2 4g . 

There exists a family of states in the code space of a 
surface-code for which the two summations in Equation 
[9] cancel each other out, and the complexity of evaluating 
product state overlaps loses its exponential dependence 
on g. Consider a state \C S ' t ) parameterized by two g- 
componcnt bitstrings 5, e: 

i^' e > : =^ E (-i) 5 - p+e7+rp i^,P>, (io) 

7,pG{0,l} 8s 

where |Xy, P ) is the encoded X basis defined by some fixed 
canonical encoding scheme. It can be verified directly 
that 

^ 7,pe{o,i}®9 

_ (_ 1 )7-(ee^)+p-(50a) 

7,pe{o,i} 8s 

equals zero unless a = <5 and (3 = e component by compo- 
nent, in which case it equals (— l) Se 2 g . So, using Equa- 
tion M 

(C 5 > £ \<j>) = AA(-l) 5 ' £ Pf {A'{w s ^)) , (11) 

which can be computed in poly(\E\, g) time. The states 
\C Se ) are the encodings of a state that is locally equiv- 
alent to a graph state of tensor product form, with one 
factor per handle. Each handle of the surface 5* encodes 
two qubits, and the corresponding graph state is local 
equivalent to a Bell state; see Figure G3 The state \C 5e ) 
has stabilizers (—l) Sj X2j-iZ2j and (— l) ej Z2j-iX2j , for 
each j = l...g. 

The 2 2g states \C ,e ) form an orthonormal basis for 
the code space of the surface code, which can be proven 
using the orthonormality of the encoded X eigenstates. If 
the coefficients ips,e expanding an arbitrary surface-code 
state If/)) in the \C 5 ^) basis are known: 

<5,ee{0,l}®9 



G 




handle 1 handle 2 handle 3 handle n 



FIG. 3: (Color online) The states in the code space for 
which MBQC remains efficiently simulatable are encodings 
of graph states. The graph has multiple components, one 
per handle. Each handle gives rise to two encoded qubits, 
and the graph state on each handle is locally equivalent to a 
Bell state among these two qubits. 



then we can improve upon Equation to compute (ij)\4>} 
in a number of steps that scales as poly(\E\, g)2 2g : 

a,^e{0,l}®9 

(12) 

This observation leads us to the following 

Theorem IV. 1 Consider an MBQC with general- 
ized flow on a resource surface-code state = 
D Q ,/3ez 2 9 i'a.^lC^' 3 ) of \E\ qubits, where g is the genus, 
and the coefficients tp a ,p are known. Then, each element 
P{o) of the output probability distribution can be com- 
puted exactly in 2 2g Poly{\E\, g) steps. 

Remark: A generalized flow consists of a partial ordering 
among the individual measurement events and a rule for 
working out which measurement basis depends on which 
measurement outcome obtained earlier. For a precise def- 
inition, see [l?} ■ The extra condition of the MBQC pos- 
sessing a generalized flow does not seem very constrain- 
ing, since it is the only known condition that guarantees 
deterministically runnablc MBQC. 

Proof By Theorem 2 of [27[, the property of a general- 
ized flow implies strong determinism of the MBQC in 
question, meaning that each branch of the MBQC is 
equally likely. We may now split the set Q of qubits 
into two disjoint subsets O and O c := Cl\0, where O c is 
the set of qubits which condition a correction operation 
and O the set of qubits which do not. The latter are the 
output qubits, and can be measured last. 

The standard procedure of MBQC with all qubits be- 
ing measured and the output bits obtained as parities of 
measurement outcomes is equivalent to the following pro- 
cedure [28|: (1) Putting in place the resource state. (2) 
Performing the local measurements on all qubits a G O c . 
(3) Applying Pauli operators on the remaining qubits 
b E O, conditioned upon the measurement outcomes ob- 
tained on the qubits a <G O c . The resulting state of the 
unmeasured qubits is |out)o (4) Measuring all qubits 
b G O. Each measurement outcome yields one bit of 
output, for all b G O. 
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By Theorem 2 of [27|, the state |out)o, outputted in 
step 3 of the above procedure, is independent of the mea- 
surement outcomes s\o" of qubits in O c , and all combi- 
nations s\o" of local measurement outcomes are equally 
likely. Therefore, it is not necessary to compute each 
of these probabilities separately. Instead, one may set 
s lo c = 0|o<=- In this case, there are no Pauli corrections 
on the qubits in O. Furthermore, 



P(o) = 2l° c l|(V;|0) O c|o) o | 



(13) 



Therein, |0)o c is the post- measurement state on the 
qubits in O c , with every measurement outcome being 
s = (eigenvalue +1), for all a € O c . \o)o is the post- 
measurement state of the qubits in O, with s& = Ob, for 
all b € O. (In both cases, the basis of the measurement 
is specified through the algorithm. It is in general not 
the computational basis.) 

Now, by Eq. (fl"2j) . the probability P(o) can be 
computed as a sum over 2 2g terms. In each term, 
Pf (A'tw 01 ' 13 )) can be computed in Poly(|.E|, g) steps. □ 



C. Quantum circuit interpretation 

Another perspective on the perhaps surprising effi- 
ciency of the states \C s,e ) comes from thinking of the 
evaluation of (ip\4>) as equivalent to computing a matrix 
element of a quantum circuit that entangles a set of N 
non- interacting fermions to 2g qubits (see Figured}. This 
interpretation is possible in certain situations where the 
graph G corresponds to a higher genus analog of a rect- 
angular lattice with N rows, such as the punctured cylin- 
der graphs to be introduced in Section IVBl In this case, 
the Ising model partition function can be evaluated by a 
simple generalization of the transfer matrix method. 

For an N x M rectangular lattice, the transfer matrix 
method [2!| allows the Ising model partition function to 
be written as the vacuum expectation value of a non- 
interacting fcrmion operator on N fermion modes: 



Ml 



Z = 2 N (vac\V 1 H 1 ...V M - 1 H M - 1 V 



where V 1 ...V M are known as vertical transfer matri- 
ces, expressed as non-interacting fermion operators with 
parameters that depend on the vertical Ising couplings 
along a given column of the lattice, while the Hj are non- 
interacting fermion operators that depend on the hori- 
zontal couplings down a given column. This leads to an 
interpretation of the partition function in terms of a ID 
quantum system, where the horizontal dimension acts 
as time. For certain suitably "rectangular" non-planar 
graphs [3(J , this formula can be generalized as 



Z 



1 

2? 



(-l) a ^(vac\T a j\vac) 



(14) 



:,/3e{0,l}®3 



where r Q p is again a product of non- interacting 
fcrmion operators, which depend on the bitstrings a and 



a) 



handle-free 

section 
A 



section 
w. handle 




handle 



"transfer matrix time" 



b) 



2,'E 



I vac) 



handle- 
free 



<0| 

(vac I 



with 
handle 



"transfer matrix time" 

FIG. 4: (Color online) Quantum circuit representation of 
the computation of a surface-code inner-product {ifi\<j>) for 
appropriate graphs. In figure b), the encoded state \%f)) is 
loaded into a register of 2g qubits, where it is subsequently 
entangled with a set of N non-interacting fermions that 
evolve conditional on the state of the qubits. The 
interaction is diagonal in the \C s,t ) basis of the qubits. 



/3 as the virtual time evolution crosses handles in the 
surface from left to right (see Figure |4]) . 

The 2g bits a, (3 arise because non-planar vertical 
boundary conditions (such as those depicted in Figure 
[4} alter the normal mapping from transfer matrices to 
non-interacting fermion operators via the Jordan- Wigner 
transformation. To express the product of transfer ma- 
trices in terms of non-interacting fermion operators, it 
is necessary to sum over various parity subspaces of the 
fermion Fock space, which leads to the summation in 
Equation 1141 The vertical transfer matrices correspond- 
ing to edge qubits directly above a handle take a form 
e _ij(-i)"fc C2fcCl = p- e ijc 2kCl + p+ e -*Jc 2kCl w he re n k 

counts the occupation of the subset of fcrmion modes 
\-k, and P k is the projector into the positive(negative) 
parity eigenspace of hk- The c\...C2N are Majorana 
fermion operators and J is a scalar Ising coupling. The 
parity projectors themselves can each be expanded as 
P k = I (i"± (— l)" fe ), where the action of the operator 
(— l) nk in the second term turns out to be equivalent to 
multiplying by — 1 the horizontal Ising couplings for edges 
immediately to the left of the handle. Thus in term T a g 



8 



of Equation [Ml both a.j and /3j arc associated with the 
signs of certain Ising couplings around the j th handle. 

When this method for computing the Ising partition 
function is used for the computation of a surface-code 
inner-product, we get that 

{(t>\i>) oc {vac ® 0\CT\vac <8> -0)- (15) 

where CT is a "controlled" fermion operator: 

CT:= \C a ' P )(C a ^\^T a , . 
a,/3e{o,i} 8s 

Therein, \ip) is the 2g-qubit state being encoded into 
the surface code, and |0) is the computational basis state 
on the qubits. Non-interacting fermion operators can be 
efficiently classically simulated (even when they are non- 
unitary), so Equation [15] can be evaluated in a number of 
steps that depends on the number of terms in an expan- 
sion of the state \tj)) in the \C a '^) basis. In particular, if 
= \C 5 ' P ) for some 5,p, then only one term must be 
computed and the evaluation of Equation [15] is efficient 
in all parameters. For more details on this approach, see 




a canonical encoding scheme. In particular 

\c^) = (-ir> 3 (f[ (z 2 ^r (z 2j y^ \o°'°), 

where \C 0,a ) indicates the state labeled by the g- 
componcnt zero bitstring for both a and /3, and = 
rieec, ^e- To simplify notation, define 

■■= (-i) Q ^C,/3- 

Then we can write any state in the surface-code space 

as 

a,/3 \fc=l / 

(Note that we have suppressed the G {0, l}® 9 under the 
summation sign to clean up the expression.) 

Now consider the quantity (i>\4 1 )- If we let the Pauli Z 
operators operate to the right rather than the left we see 
that 



D. Entanglement in the effective output state 



(</#) = (C ,,u |$), 



In the following we will prove tighter bounds on the 
classical simulation cost on MBQC with surface-code 
states, in which the exponential factor 2 2g in Theorem 
IIV.1I is replaced by smaller exponentials. Specifically, we 
have 



2 E sch(\$)) < 2"(l*» < 2 2g , 



where |4>) is an effective state containing all relevant in- 
formation about the encoded state \ip), the encoding and 
the local bases in which \ip) is measured. Furthermore, 
Esch is the Schmidt measure of entanglement and n is 
the log of the number of terms in a special fixed basis 
expansion. We have already seen that n can be much 
smaller than 2g, namely n = for the graph states in 
Fig. Our tightest bound involves the Schmidt en- 
tanglement measure, and is stated in Theorem IIV.2I A 
complication arises due to the fact that computing the 
optimal basis for the Schmidt decomposition in general 
is a hard problem in itself. In this regard, we show that 
Esch(\&) = n (\®)) under mild assumptions; See Theo- 
rem HES 

Recall that the states \C a ^) can be written in terms 
of the encoded X-eigenstates of a canonical encoding 
scheme: 



\C 



1 

29 



Y (-l)"-" +/3 - 7+7 ' P |X 7 ^). 

7,pe{o,i} 8s 



It is straightforward to prove that these states are all 
related to one another by encoded Pauli Z operators for 



where 

a,P \k=l ) 

= e*m n n z " k n 

V^leeC^ eeC' 2k J e£E 

(16) 

Thus, evaluating the overlap between an arbitrary 
surface-code state and a product state is equivalent to 
evaluating the overlap of one of the "easy" states \C 00 ) 
with an effective state |<3?) which is generally not a prod- 
uct state of the physical qubits. In a sense, the state |4>) 
reflects an encoding of the 2g qubit state into the \E\ 
physical qubits of the state \<fi). From Equation [TBI it 
is clear that |$) is a function of: i) the state \ip) being 
encoded into the surface code; ii) the chosen encoding 
scheme C^.-.C^; and iii) the product state \<f>). In terms 
of simulating MBQC, the state |$) combines both the 
specification of the resource state and the particular se- 
quence of measurement outcomes one is computing the 
probability of (see Section IIII[) . 

If |$) were to be expanded as a sum over product 
states, we could evaluate (C 00 \&) in a number of steps 
that grows linearly with the number of terms in the ex- 
pansion. The base-2 logarithm of the minimal number of 
product states that are required to expand a multipar- 
tite quantum state is an entanglement monotone known 
as the Schmidt measure (3l| . That is, for an N qubit pure 
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state the Schmidt measure Es c h ( | V 1 ) ) is the minimum 
number such that 

m= E W)ix j 2 )...ix^ 

for some set of local states \xj) for all j = 1...2 Esch ^^\ 
k = 1...N. We will call the \xL) in such an expansion 
(with 2 Esch ^^ terms) an optimal local basis for \ip). Ap- 
plying the Schmidt measure to our situation, we imme- 
diately have the following result. 

Theorem IV. 2 If an optimal local basis for the effec- 
tive state |$) is known, then (if)\4>) can be computed in a 
number of steps that scales as poly(\E\, g)2 Esch ^®^ . 

Computation of Eg c h(\ip)) for a generic multiparty 
state - no less finding an optimal local basis for it - is 
generally a very hard problem. Yet an efficient means 
of computing an optimal local basis is necessary to give 
Theorem IIV.2I much practical significance. In our case, 
the task of evaluating the Schmidt measure is simplified 
considerably by the definition of |$). Since each term 
Equation [TH] is a product state, we know that Es c h(\^)) 
must be less than or equal to 2g, even though |$) is a 
state on generally many more than 2g qubits. Further- 
more, we can show that under fairly general conditions, 
Equation in fact [TB] already provides an optimal local ba- 
sis for |$). 

To state these conditions, we briefly introduce some 
notation. Let G— Z denote the subgraph of G composed 
of all edges e such that |</> e ) is not a Pauli Z eigenstate. 
For any set of edges A, let Ma be an |A| x 2g matrix 
such that M e , k = 1 if e G C' k and M e>k = if e % C' k , for 
all e G A. Note that there must exist some edge set A = 
{ek}k=i...2g such that rank (A/a) = 2<? over the binary 
field, since the cocycles C' k are mutually independent as 
edge sets. For the theorem, we will need to assume a 
slightly stronger condition: 

Theorem IV. 3 Consider the case where G — Z con- 
tains two disjoint sets of 2g edges A = {ek}k=i...2g and 
B = {e' k }k=i...2g such that rank (Ma) = rank(Ms) = 2g. 
Then the expansion in Equation 1/61 yields an optimal lo- 
cal basis for |4>) and Es c h(\^)) = log%(D), where D is 
the number of nonzero coefficients ty a . 

Proof See Appendix [Bj 

The condition assumed for Theorem IIV.3I seems very 
weak in practice, but in principle may not hold. Figure 
[5] shows a simple embedded graph with cocycles C' k that 
would violate the condition if any of the cocycle edges 
were measured in the Z-cigenbasis. 

The state |<£>) and the coefficients ^ a ,0 can be effi- 
ciently computed from the coefficients ip a .p and the def- 
inition of the surface-code cocycles C' k . The number of 
nonzero ^ a ,p is exactly equal to the number of nonzero 




FIG. 5: An embedded graph for which the condition of 
Theorem IIV.3I does not hold, if one uses cocycles 
C[ — {C, E}, C' 2 = {A, B}, and for at least one edge 
e 6 {A, B ,C, E} the state \cj> e ) is a Z-eigenstate. 

-0Q./3- It follows from Theorem IIV.3I then that if the D 
nonzero coefficients if} a .p arc known, and the assumption 
of the theorem is satisfied, then the quantity (tp\4>) can 
be evaluated in a number of steps that is polynomial in 
the size and genus of the embedded graph but increases 
exponentially with the entanglement in |$), as measured 
by the Schmidt number. We remark that the assumption 
of Theorem IIV.3I is satisfied whenever the restriction of 
each C' k to G — Z contains two edges that are not shared 
with any of the other C[ for I ^= k, which would be ex- 
pected of cocycles on any but the smallest graphs. 



V. PARTIAL MEASUREMENT 
PROBABILITIES 

In this section we turn to classical simulation in the 
strong sense of notion 2 in Sect ion HTT1 As a starting point, 
we recall the result from [l5[ , in which it was shown that 
MBQC on surface-code states can be efficiently simulated 
when the underlying graph is planar, and the set of mea- 
sured qubits E and its complement E are connected at 
all stages of computation. This result is demonstrated 
by showing that the probability of obtaining a particular 
sequence of measurement outcomes on E is proportional 
to the inner product between a planar code state on a 
modified graph GgUG- and a product state. The graph 
GgUG*~ is obtained by taking two copies of the subgraph 
C?g and gluing them together at the boundary of E and 
E. 

We will obtain a similar result for general surface-code 
states, but in the present context the relation is con- 
siderably complicated due to the nontrivial topology of 
Gs U G*~. To handle this new setting, we find it nec- 
essary to specialize to cases where underlying graph is 
what we will call a punctured cylinder graph of genus g. 
In doing so, we find that MBQC on a punctured cylinder 
graph surface code with a natural ordering of single qubit 
measurements can be simulated (in the strong sense) ef- 
ficiently in the size of the graph, but inefficiently in g. 
For the states \C a,!3 ) in this code space, the simulation 
is completely efficient. 

While we expect the result to extend to more general 
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surface-code states and measurement orders, we were un- 
able to prove such as result, and leave it as an open ques- 
tion. Punctured cylinder graphs represent a very simple 
generalization of the square lattice to higher genus. Fur- 
thermore, as a family they contain all higher genus graphs 
as a graph minor. In principle this makes most of our 
analysis applicable to arbitrary graphs (see the footnote 
and discussion of graph minor operations in Scction fC 21) . 
but it is unclear what efficiencies hold in general. 

A. General considerations 

We consider simulating MBQC by computation of the 
partial measurement probabilities introduced in Section 

nn 

We will begin by proving some results regarding 
p{\^e)) t na t n °ld for all connected graphs G with no 
self loops. In what follows, we will assume as in [l5j that 
at each stage of the computation, the set of measured 
edges E is connected, as is the set of unmeasured edges 
E. Our first step will be to construct a Schmidt decom- 
position for the state |+). This will follow from a few 
definitions^ and lemmata. 

Let G(E) denote the subgraph of G that contains only 
the edges E, as well as all vertices V which have at least 
one edge incident on them from the set E. Define V and 
G(E) similarly, and let dE C V := V D V be the set 
of vertices containing at least one edge incident upon it 
from both of the sets E and E.JWe can think of dE as 
the boundary between the sets E and E. 

Let E (E) denote the set of cycles on the graph G(E), 
and define E (E) analogously. Under the assumption 
that E is connected, we have: 

Lemma V.l \E (E)\ = 2l £ l-M+i. 

Proof Eo(E) is a set of \E\ binary variables {x e } satisfy- 
ing the |V| binary equations: ^2 eeSs x e = for all seF. 
If we add together the equation Y^eeSa Xe = over a ^ 
s iE V, then each binary variable x e appears cither twice 
or not at all, and we obtain = 0. The equations are oth- 
erwise bitwise linearly independent so the total number 
of independent binary equations is | V| — 1. □ 

Now let Eq(E, dE) denote the set of binary strings over 
the edges such that the cycle condition holds everywhere 
except possibly on the vertices on the boundary dE. 

Lemma V.2 \E (E,8E)\ = 2l S Hvi+|8E| . 

Proof Eo(E) is a set of \E\ binary variables {x e } satisfy- 
ing the \V\ — \dE\ binary equations: J2 eeSs x e = for all 
s G V\dE. The exclusion of the vertices in dE removes 
any linearly dependence among these equations. □ 



We now turn to the structure of the set E (E, dE). For 
any x G E (E,dE), let Aa; be a bitstring encoding the 
parity of edges from x incident on the vertices s G dE, 
i.e. Ax s = X)ee<5s ^ e f° r eacn 3 € dE. Following Ref [rsj . 
we call Aa; the syndrome of x. Then define Eq(E, u) C 
Eq(E, dE) to be the jet E (E,u) := {x G E (E,dE) : 
(Ax) s = u s Vs G dE}, where u — ui...u^ g ^ is a given 
syndrome. 

Lemma V.3 E {E,dE) = \J ueS E Q (E,u) where S is 

the set of all bitstrings over the vertices in dE that have 
an even number of 1 's. 

Proof Since every x G Eo(E,dE) has some parity dx 
on the vertices in dE, it is immediate that Eo(E,dE) = 
UufEu Eo(E, u) for some set u of bitstrings over the ver- 
tices in dE. We only need to show that u = S. Indeed, 
Eq(E,u) is defined by the |V"| equations: J2 e£ g s x e = 
for all s G V\dE, and ^2 eeSs x e = u s for all s G dE. If 
we add together these equations for all s G V , we obtain: 
= X)sgS-E Ms ' Thus the equations defining Eq(E,u) 
are inconsistent if u (f: S. On the other hand, there are 
no further linear dependencies among the equations, so 
E (E,u) ^ if u G S(E). Since E (E,u)nE (E,u') = 
for any u, v! G S such that u^u', it follows that u can- 
not be a proper subset of S. □ 

Corollary V.4 \E Q {E,u)\ = 2^H v7 l +1 f or a llu£ S{E) 
(and similarly for E). 

Proof The above considerations imply that Eq(E, u) has 
the same size for each u G S(E) and so \Eo(E,dE)\ = 
\S(E)\\E (E,u)\. From its definition, \S(E)\ = 2^~^, 
while \E (E,dE)\ is given by Lemma IVT21 □ 

Corollary V.5 For any u G S{E), E (E,u) = z(u) ® 
Eq(E) where z(u) is any fixed member of the set 
E (E,u). 

Proof For any x G E {E) and z(u) G E (E,u), x@ 
z{u) G E (E), since A(x z(u)) = Ax + Az(u) = u. 
Thus, z{u) © Eq{E) C E a (E,u). Furthermore, \z(u) © 
E (E)\ = \E Q (E,u)\, so E (E, u) = z{u) © E (E). □ 

Note that all of the above considerations apply to the 
edge set E as well. We are now in a position to construct 
a Schmidt decomposition of the state |+) with respect to 
the (E, E) bipartition of qubits. 

Theorem V.6 A Schmidt decomposition of |+) is 

l+)= t=^= E ® \k e {u)), (17) 
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where 



\Kdu)) := 



1 



E 



\Eq(E, u)| x£E (E,u) 

and \Kg(u)) is defined analogously. 
Proof Note first that 

E (G) = {(x,x) G E Q (E, dE) ® E (E, dE) : dx = dx}. 



Then, by Lemma IV. 31 

i+) = 7^E E E Ms>i*>- 

VI <K )\ u,ueSxeEo(E,u) &eE {E,u) 

(18) 

Equation [T7] now follows by the definition of S and work- 
ing out the normalizations using Corollary IV. 41 It is 
easy to see that (K^(u')\K^(u)) = 5 u>u i, and similarly 
for E.U 

The reduced density matrix on the subsystem of qubits 
corresponding to the edges in E is then, by Equation [T7l 

Pe = Kze (l+X+l) - E \K s (u))(K E (u)\. 



u£S 



. (19) 

We note that it is evident from the normalization in 
Equation 1191 that |+) obeys the so-called entanglement 
area law: the entropy of entanglement of a block of spins 
grows linearly with the size of its perimeter. 

For an arbitrary surface-code state |^>) = 
|X 7 ), define p s {$)) := tr^ 
Then using Equation [17] we have 



(K § ( U ')\Zf s \K & (u)}, 



(20) 



PeW) 

where Z 1 - := Y\* 9 = i{Tleec'.nE Z ^ 13 and analogously for 

E. We can evaluate the matrix product using the defini- 
tion of \K^(u)): 

1 



(K^u')\Zf S \K^u)) 



\e (e,u)\ 



E 



zT 5 \x) 



x,yeE (E,u) 



29 



\E (E,u)\^ 



.(7e«)i|5(u)nC'| 



Y[(-i) h(S5):il&nc " 31 , 

xeE (E)3 = 1 



(21) 



where z(u) is any fixed member of the set Eq(E,u) and 
we have used Corollary IV. 51 in the last step. Consider 
any value of j such that (7 © S)j = 1. If there exists any 
y G E (E) such that |j/nCj| = 1 (mod 2), then the above 



summation over x G Eq(E) vanishes. That is because for 
each x G E Q (E), the bitstring x ®y term will have the 
opposite sign as the x term and the two will cancel, since 
\x ® y f~l Cjl = 1 + \x l~l C'j\. Let ^4 denote the set of 
j G {1...2g} such that there exists a y G E$(E) satisfying 
|j/ n Cj-| = 1 (mod 2). Let B denote the set of j that are 
not in A, but for which C'j (1 E ^ 0. So we can rewrite 
the RHS of Equation I2T1 as 

because if 7^ = 5j for all j G -B then each term in the sum- 
mation over x G Eq(E) is positive, cancelling the overall 

factor of \Eq(E,u)\ . Using this and Equation [20l we 
can now consider a partial measurement probability for 
the qubits in E: 



p{\^e))=(^e\Pe(WMe) 

in II 4 



2\dE\-l 



7i, 



7,5 



b*~\Zl z b ~ 

E 1 E x E 2 



u£S 



(-l)EieB(7ffl*)il*(«)ncf;|| Jif _^ g)iif _^ u ^_ 

(22) 



In this notation, we have replaced the product of two 
matrix elements ((f)^\Z^~\K^{u)){K^{u')\Z 5 ~\(j)~) in the 

Hilbcrt space of \E\ qubits with a single matrix element 
(^(8)(?!>~|Zl ^| \K^{u)®K^{u')) in the Hilbert space of 

2\E\ qubits. Here is a product state obtained from 
|^)~) by complex conjugating a e and b e for each e G £\ 
Z~ is the operator applied to the first copy of E, 

Ei E 

denoted as E\ (and likewise for E 2 ). 

Equation [21] relates p{\4>^)) to a summation over 
states in the Hilbert space of a surface code on the graph 
G(.Ei) U G(E 2 ), defined by taking two copies of G(E) 
and gluing them together at the vertices in the boundary 
dE (as in [HI]). When the set B is empty for example, 
the ket in Equation I2T1 becomes Ylu&S \K-e( u ) ® ^e( u ))> 
which is the logical +1 X eigenstate |+) of the surface 
code on G(Ei) U G(E 2 ). This is because the set of cy- 
cles Eq(G(Ei) U G(E 2 )) on this graph has the structure: 
£o(G(£i)UG(£ 2 )) = {(x,y) G E (E,dE)(g> E (E,dE) : 
3a; = <9j/}. In the notation of Equation [TJ 



|if(G(£i) U G(E 2 ))) 



53i^(«)®^g(«)>- 



t.S' 



B. MBQC on punctured cylinder graphs 

We now define the family of punctured cylinder graphs 
and apply the above analysis to them. To construct a cel- 
lularly embedded punctured cylinder graph, consider an 
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TV x M square lattice with periodic boundary conditions 
in the vertical direction, embedded on the surface of a 
solid disk. Then, imagine drilling g thin holes (or "slots" ) 
through the disk, each one in between two rows of ver- 
tices on the graph. Finally, vertical edges are extended 
through each slot, as in Figure |6] below. 




FIG. 6: (Color online) A three-slot punctured cylinder graph 
cellularly embedded on a surface of genus three. 

A family of such punctured cylinder graphs is 
parameterized by the dimensions of the lattice 
along with the position and width of each slot: 
{N,M,{xi ) yi,Ki},...{xg,y gi Kg}}. We will take the 
slots to be ordered from left to right (xj+i > Xj), 
and assume that no two slots are above one another 
{xj+i > xj + Kj). A flattened representation of a punc- 
tured cylinder graph is shown in Figure [7] 
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FIG. 7: A three-slot punctured torus graph. The n = 3 
handles have positions (xj,yj) and widths Kj for j = l...n. 
Pairs of points marked by diamonds are identified within 
each column, according to Figure [6] 

It will be necessary to give a concrete set of encoding 
cocycles C' k for the punctured cylinder surface code. A 
suitable choice is shown in Figure |U These cocycles in 
fact constitute a canonical encoding scheme (as defined 
in Appendix [XJ . This is because one can continuously 
deform the loops drawn in Figure [8] for the cocycles C' k 
such that they form a canonical polygonal schema (this 
does not change the edge sets E k defined in Appendix 
|A"|) . This deformation is shown in Figure [TU] for the simple 
case of a double torus. 

We will also assume a particular order in which to make 
the single qubit measurements of MBQC on the punc- 
tured cylinder lattice, in order to simplify the analysis. 
Since the punctured cylinder graph has a left and right 
boundary, we may unambiguously start at the leftmost 
column, and measure the qubits column by column pro- 
ceeding to the right. That is: first we measure all qubits 
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FIG. 8: (Color online) A set of 6 non-trivial cocycles C' k on 
a three-slot punctured cylinder graph. The edges included in 
a cocycle are those that are crossed by the line depicted. 



on the vertical edges in column 1, then all of the qubits 
on horizontal edges between columns 1 and 2, then the 
vertical edge qubits in column 2, and so on. We fur- 
ther take the measurements to occur row by row as one 
moves down a column of horizontal or vertical edges. For 
brevity, we will call this ordering of measurements LtoR. 
LtoR seems to be a natural choice because it mimics the 
simple temporal order in a quantum circuit, and it satis- 
fies the assumption of the previous section that both E 
and E are connected at all stages. 

Our main result of this section is the following theorem: 

Theorem V.7 Consider a state in the surface-code 
space of a punctured cylinder graph G of genus g. For 
MBQC on with the measurement ordering LtoR, at 
any step E of computation and for product state of out- 
comes \4>e) : 

P (\^))=a(cj } (G'(E))\^G'(E))), 

where G' '(E) is an embedded punctured cylinder graph of 
genus less than or equal to 2g, \ip(G' (E))) is a state in the 
codespace ofG'(E), \<p(G'(E))) is a product state, and a 
is a known proportionality. 

Proof Sec Appendix [Cl 

Together with Theorem IIV.21 we then have the following 
Corollary: 

Corollary V.8 For MBQC with the measurement 
scheme LtoR on a punctured cylinder code state if 
an optimal local basis for the effective state |<i>) corre- 
sponding to the inner product in Theorem \V-7\ is known 
at each step E of computation, then the probability dis- 
tribution P over the outcomes of the next measurement 
can be classically sampled from in poly(\E\, g)2 Esch ^^ 
steps. 

As a special case of Theorem lV.81 MBQC on the states 
\C a 'P) in the codespace of the punctured cylinder code 
can be simulated completely efficiently in the strong sense 
of sampling: 

Theorem V.9 The probability distribution P of compu- 
tational output values of MBQC on one of the states 
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\C a 'P) in the code space of the punctured cylinder code 
(with the measurement scheme LtoR) can be sampled 
from efficiently in both \E\ and g. 

Proof See Appendix [D] 

VI. CONCLUSION 

We have considered the classical simulation of MBQC 
with surface-code states as resource states. We first 
showed that for surface-code states the probability of ob- 
taining any single MBQC outcome can be computed in 
a number of steps that scales polynomially in the size of 
the surface-code embedded graph, and at worst exponen- 
tially in its genus. We found a family of states in the code 
space of any surface code for which this probability can 
be computed efficiently in both the size and the genus of 
the graph. For intermediate cases, we found a connec- 
tion between the complexity of computing such proba- 
bilities and entanglement. In particular, the cost scales 
exponentially in the Schmidt measure of a state which 
combines the specification of MBQC outcomes and the 
quantum state being encoded into the surface code. We 
also considered the task of sampling from the probabil- 
ity distribution over MBQC outcomes, and saw that for 
MBQC on a certain family of embedded graphs with a 
simple ordering of measurements, this task is equivalent 
to computing a single MBQC outcome probability for a 
modified graph. From this we were able to define a class 
of higher genus surface-code states for which MBQC can 
be efficiently classically simulated. 
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Appendix A: Evaluating the Generating Function of 
Cycles 

In this Appendix we show that the generating function 
of cycles on an embedded graph G can be written in the 
form of Equation [8J 

Cy(G,w) = ± J2 (-ir Pi(A'(w^)). 

a,0e{O,l}®9 

To arrive at Equation [51 we map the problem of eval- 
uating the generating function of cycles on G to the 
problem of evaluating the generating function of perfect 
matchings on a modified graph G". Then we apply a 
result from [32j to evaluate this generating function. 

A perfect matching M of a graph G is a subset of the 
edges of G such that every vertex contains exactly one 




FIG. 9: Transformations at each vertex from G to a 
modified graph G' . 

edge incident upon it in M. Let "PAi(G) denote the 
set of all perfect matchings on G. If to each edge e we 
associate a weight w e , then the generating function of 
perfect matchings on G is defined as 

P(G,w):= J2 Il>- 

MeVM(G) e£M 

We now define a modified embedded graph G' by the 
following four rules, adapted from [26| and [33j |: 

• If any vertex v has exactly one edge incident upon 
it, remove it and the incident edge from G 

• For any vertex v with exactly two edges a and b 
incident upon it, split v into two vertices connected 
by a new edge with weight 1, as shown in Figure 

Hi. 

• For any vertex v with exactly three edges incident 
upon it, replace v with six vertices and nine edges 
as shown in Figure ^jp. 

• For any vertex with n > 3 edges incident upon it, 
first replace v with n — 1 vertices of degree three 
as shown in Figure [9}:, and then follow the rule 
for a degree three vertex for each of the resulting 
vertices. 

The above rules define a graph G' which differs from G 
only locally around each vertex (and deletion of vertices 
of degree one). Thus, it also has a natural embedding 
on S where the modification around each vertex can be 
made arbitrary small. Furthermore, it can be verified 
that there exists a one-to-one mapping between cycles 
x G E Q (G) on G and perfect matchings M G VM(G') on 
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G' , and that the product of edge weights for a given cycle 
on G is equal to that of the associated perfect matching 
on G 1 . So: 

Cy(G,w) = P(G',w'), 

where w' denotes the edge weights w e for all e £ E along 
with w e = 1 for all of the new edges introduced in the 
transformation G — > G' . 

In [32| , Galluccio and Loebl study the problem of eval- 
uating the generating function of perfect matchings on 
a graph G' that is embedded on an oricntable surface of 
genus g. Their main result (Theorem 3.9 of [32j]) is a 
formula for P(G',w) that can be written in the form 
of Equation H Therein the function Pf(A'(w a ^)) is 
the Pfafnan of a \V'\ x \V'\ weighted adjacency matrix 
A'(w a, P), where \V'\ is the number of vertices in the 
graph G' (a few more edges may need to be added to 
G', as we shall see at the end of this section). The Pfaf- 
fian Pf(M) of a 2N x 2N matrix M is a polynomial in the 
matrix entires that is related to the determinant, and can 
be computed in poly(N) time. In their work, Galluccio 
and Loebl take the embedded graph as being specified by 
a so-called canonical polygonal schema. A curve in S is a 
continuous map h : [0, 1] — > <S, and a loop is a curve with 
h(l) = h(0). A canonical polygonal schema of a graph G 
is obtained from its embedding on S by cutting S along 
2g loops C\...C2 g , chosen such that after the cutting 5* 
can be unfolded into a convex polygon Bq with 4g sides. 
Each cut Ck produces two paired sides of Bq, which we 
denote as C\ and C^, and the sides of Bq arc arranged 
in clockwise order as C\,C\,C\ 1 C\,C\...C\ g . The closed 
surface S can be reconstructed by glueing C\ and C\ back 
together with the proper orientation. 

To use the results of reference (32j then, we require a 
suitable set of loops C\...C2g on S. These can be chosen 
as follows: draw 2g non-self-intersecting curves on S that 
all begin and end at a common base point x, but are oth- 
erwise non-overlapping and non-crossing, and such that 
for each j: Cij-\ goes around the j th handle, and C^j 
goes though the j th handle. See Figure ITUb for an ex- 
ample. Consider now the original graph G embedded on 
S. Choose the basepoint to be at the center of some face 
/ of G. Without loss of generality, we may choose the 
Ck to avoid the vertices of G and cross the embeddings 
of the edges of e only at isolated points. After cutting 
S along these loops, we are left with a plane graph plus 
some cut edges. We define Go as the plane graph on Bq 
consisting of all of the vertices of G and all of the edges 
that do not cross any of the cuts Ck- Let Ek denote the 
set of edges of G that cross the loop Ck an odd number 
of times. We now prove a few properties of the sets Ek- 

Lemma A.l For each k £ {l...2g}, the edge set Ek is a 
cocycle of G. 

Proof For each f € F, the cycle df defines a loop or set 
of disjoint loops Ct on S. Since C/ forms the boundary of 
a region of S, the loops C/ and Ck cross an even number 
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FIG. 10: (Color online) a) A set of loops on a double torus 
defining a set of punctured cylinder graph cocycles C' k as 
shown in Figure [8] b) a deformation of these loops to define 
a canonical polygonal schema, and c) the octagon obtained 
after cutting along the loops shown in b) and unfolding the 
surface. To visualize the move between Figures b) and c), 
one may separate the two tori and imagine unfolding each 
individually into a single torus with a boundary, as shown in 
Figure 84 of [H (p.71). 



of times (this follows from the Jordan Curve Theorem) . 
So, there cannot be an odd number of edges e £E df that 
cross Ck an odd number of times. Thus \df n Ek\ is even 
for every face / € F, □ 

Lemma A. 2 The cocycles Ek are homologically inde- 
pendent on G. 

Proof If this were not true, then for some collection Y C 
{1...2g} of the Ek and some set V C V of vertices, we 
would have: 



The edge set © fce y Ek is precisely the set of edges that 
are crossed an odd number of times by the loop Cy , which 
we define as the concatenation of the loops Ck for all k € 
Y , in some arbitrary order. By continuously deforming 
Cy around the vertices v € V, one obtains a modified loop 
Cy that crosses all edges e G E either an even number of 
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times or not at all. Removal of the loop Cy from S does 
not separate the surface, because cutting along all of the 
Cfe results in a single polygon Bo , which is still connected. 
Since Cy is related to Cy by a continuous deformation, 
its removal does not separate S either. But now we can 
prove a contradiction, because a non-surface-separating 
loop must intersect at least one edge of G an odd number 
of times. 

To demonstrate this, we use a result from (35| (cf. 
Lemma 3). First, we define an embedded graph Gy 
which combines the original graph G, and the loop Cy 
as follows. Add a vertex to G at each point where Cy 
crosses an edge of G, and a vertex at the base point x 
of the canonical polygonal schema. For each section of 
Cy between two intersection points with G, add an edge 
that traces the section. Finally, add edges that trace Cy 
between the basepoint x and the points where Cy first 
crosses an edge from x. The new edges that trace out 
the loop Cy define a cycle of Gy, which we denote as 
cy . For any edge e of G that was split into several edges 
e\...e k by the transformation G — > Gy, let e denote the 
set {ei..efc}. The number of times that Cy crosses the 
edge e of G is then |e| — 1. Let {Q\...Q2g} denote any 
set of 2g homologically independent cycles on G, and 
for each Qj let Qj denote the corresponding cycle on Gy 
(simply let {e} — > e for any edge e that is crossed by Cy). 
By Lemma 3 of [35| , there exists some j such that Qj is 
crossed by cy an odd number of times, iff cy is a homo- 
logically non-trivial cycle on Gy. The cycle cy must be 
homologically non-trivial on Gy, because if it were not 
then it would form the boundary of a set of faces of Gy , 
and cutting along cy (or equivalcntly Cy) would separate 
the surface S (a similar argument shows that the Qj are 
homologically independent on Gy , which is necessary for 
our use of the result in (35j). So cy crosses Qj an odd 
number of times, for some j. But, if there were no edge 
e of G that was crossed an odd number of times by Cy, 
then Qj and cy could only cross an even number of times 
(or zero). So there does exists such an edge e. □ 

Theorem A. 3 The cocycles Ek constitute a possible 
choice of encoding cocycles C' k for the surface code on 
G. 

Proof By Lcmma lA.2[ the cocycles Ek are homologically 
independent on G. All that's left is to show that with en- 
coded Z cocycles defined as C' k := E k , there exists at least 
one set of encoding cycles for the X operators Ck on G 
such that |Gj-nG£| = Sj k (mod 2). As discussed in Section 
ILTl a tree-cotree decomposition of G guarantees the exis- 
tence of homologically independent cycles T(ei)...T(e2 S ) 
and homologically independent cocycles C(ek)---C(e2 g ) 
on G such that \T(ej)nC(e k )\ = 6 jk . The cocycles C(e k ) 
along with the edge sets S v for all v 6 V form a basis for 
all cocycles on G with respect to the symmetric differ- 
ence of sets. So, C' k = meYfc G(e m ) © (& veVk S v for 
some Yfc C {l...2g} and V k C V. Since the C' k are homo- 
logically independent, the 2g x 2g matrix A defined by 



A mk G {0, 1} : A m k — 1 iff m G Y k is invertible over the 
binary field Z2. Let A -1 denote its Z2 inverse and define 
the set Y~ l as the set of all I for which A~} = 1. Then 
define a set of encoding cycles as Cj := @ ;eF -i T(ei). 
Using the definition of a cycle and \T(ei) nC(e m )| = 6i m 

\Cj nC' k \= S lm = A-lA mk = S jk , 

l^y- 1 meY k m=l 

where in this expression ® denotes mod 2 addition of 
numbers. Finally, the cycles Cj so defined are homo- 
logically independent on G because the matrix A^ 1 is 
invertible over Z2. □ 

Definition A. 4 Given a canonical polygonal schema 
{Ck}, a canonical encoding scheme is the choice of 
encoding cocycles Ci := E k . This is a valid one by 
Theorem \A.3l 

So far, we've defined a canonical polygonal schema 
{Ck} for S, and the associated canonical encoding scheme 
{E k } for the surface code of G. We now apply these con- 
cepts to the modified graph G' . Since all of the vertices of 
G belong to the interior of -Bo, we can perform the graph 
modification G — > G' in an arbitrarily small neighbor- 
hood of each vertex after unfolding the embedded graph 
G. We take the Ck to be chosen such that they avoid 
crossing any edge e that is incident on a vertex of de- 
gree one (one may merely drag Ck across that vertex to 
avoid e). This yields a canonical polygonal schema for 
G', where the edge set Ek is still the set of edges of G' 
that cross the cut Ck an odd number of times. 

Another modification of the graph G' is necessary for 
us to use Equation [H] (see Corollary 3.9 of [IH). Con- 
sider any edge e that crosses n possibly non-distinct cuts 
Cfcj...Cfe n , in that order as you follow e in one direction. 
If n > 1, then one modifies G' by adding 2n vertices 
and replacing e by a string of edges e\...e2 n +i connected 
in a chain such that e2j-i crosses one cut Ck for each 
j = I...71. Edge ei is given weight w e while the rest of 
the edges receive a weight of w e . = 1. Call this transfor- 
mation bridge splitting. Bridge splitting guarantees that 
no edge of G' crosses more than one cut, or any single 
cut more than once. Let E' k denote the set of edges of 
G' that cross the cut Ck- Let w' continue to denote the 
set of weights of the edges of G' . One may verify that 
the generating function P(G',w') of perfect matchings 
is unchanged by bridge splitting. After bridge splitting, 
a few more minor transformations of the graph may be 
necessary (see [32|), but these do not affect our analysis. 

Now we consider the construction of the weighted ad- 
jacency matrices A'(w a '^) in Equation[5] Let G' Q be the 
subgraph of G' that belongs entirely to B . G' contains 
all of the vertices of G', and all of the edges that do 
not cross any cut. An orientation of a graph is an as- 
signment of a direction to each edge. As a plane graph, 
it can be shown that G' has an orientation Dq of its 
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edges such that the boundary of each face has an odd 
number of edges oriented clockwise j36j . Such an orien- 
tation is called a basic orientation, and we fix a par- 
ticular one Do. For each k E {1...2g}, Gallucio and 
Loebl show that G' U E' k has a natural plane embed- 
ding, and a unique orientation Dk of the edges Ek such 
that (Do,Dk) is a basic orientation in this plane em- 
bedding. For any a, j3 € {0, l}® 2 ^, a so-called relevant 
orientation of G" is defined as follows: start with the ori- 
entation (Do, Di, D2-..D2 g ), and reverse the orientation 
of all edges in E 2k _ 1 if ctk = 1, and reverse the orienta- 
tion of all edges E' 2k if j3k = 1, for each k = l...g. For 
any two vertices u,v of G' , we define the matrix element 
[A' (w') a ' l3 ]u,v to be if u and v are not connected by an 
edge, w' e if u and v are connected by an edge e oriented 
from u to v, and —w' e if u and v are connected by an edge 
e oriented from v to u, where the edge orientations are 
defined by the relevant orientation a, /?. 

The matrix A'(w') a '^ depends both on a and (3 and 
the edge weights w' e . Reversing the orientation of an edge 
has the same effect as multiplying the corresponding edge 
weight by -1. So, we may write A'(w') a ^ = A'(w' a ^) 
where A'(w') denotes the adjacency matrix A'(w') 0,0 of 
G' corresponding to the concatenation of the basic ori- 
entations (Do, Di, D2---D2g), and w' a ^ is the set of edge 
weights w' after we multiply by — 1 all edge weights along 
the cocycle E' 2k _ 1 if a>k = 1 and along the cocycle E' 2k if 
Pk = 1- Recall that the edge weights w' of G' are deter- 
mined by the edge weights w of G, so we could denote 
A'(w') as A'(w), where the matrix A'(-) incorporates the 
effect of the graph modifications G — > G' . Wc will now 
show that Pf (A' (w' a ^)) = Pi(A'(w a '^)), where w a > 
is the set of edge weights w of G after we multiply by 
— 1 the edge weight w e once for each time it belongs to a 
cocycle i?2fc-i for which oik = 1, and once for each time it 
belongs to a cocycle E2k for which = 1. Each nonzero 
term of the Pfaffian Pi(A' (w') 01 ' 13 ) depends on w' only 
via the product of edge weights w'f'" for the edges e in 
a particular perfect matching of G' (see Definition 1.3 in 
|32|). For any edge e € E that was replaced by a set 
of edges e\...e2n+i during the bridge splitting process, 
a perfect matching of G' contains either none or all of 
{ei, e3...e2 n +i}. If e € Ek, then there are an odd number 
of e 2 j-i that cross the cut Cfe. Multiplying the weights of 
all of these edges by — 1 yields an overall minus sign for 
a term containing {ei, e3...e2 n +i}; which has the exact 
same effect as letting w e — >• — w e before bridge splitting. 
If on the other hand e crosses Ck but an even number of 
times, then there are an even number of e2j-i that cross 
the cut Ck, and there is no effect on Pi(A' (w') a ^) from 
multiplying the weights of these edges by —1. Finally, 
with Pf (A' («/ Q '' 3 )) = Pf (A'(w a ^)), Equation |U holds 
up to a possible overall minus sign by Theorem 3.9 of 
|32|. The possible minus sign depends upon Do and the 
structure of the graph G' , but not on the edge weights 
w a '@ . So we may neglect it as it would only add an overall 
phase to (V>|</>) in Equation [7] 



Appendix B: Proof of Theorem IIV.3I 

We will show that under the assumptions of the theo- 
rem, if 

l$> = £lxi>lxiMxj B i> 

3=1 

for any set of single qubit states |xi); then s > D. Our 
first step will be to be to isolate a single term of Equation 
1161 by taking a partial inner product between | $) and a 
particular state on the qubits in A. 

In the following, the distinction between the even and 
odd numbered cocycles will not be important, so we 
simplify notation by writing the coefficients \£" a _p as ^ a 
where a is now a 2g component bitstring. Then we can 
rewrite Equation [TBI as: 



2s 



I*) 



E 

ae{0,l}® 2 9 



*° n n z e 



\<t>e 



,fc=l eeC. 



eeE 



E 

a£{0,l}® 2 s eS-E 



* a 6§(A) [Ma H^e}, 



where M is the \E\ x 2g matrix such that M e ,fc = 1 if 
e e C' k and M e . u = if e £ C' k , for all eeE. [Ma] e := 

YlkLl M e.k * Oik- 

Write \4> e ) = a e \0) + b e \l) for any edge e. Now we 
define |^) := 6*|0> +a*|l), and \<fc±) := &* |0> - a* 1 1} . 
It is easy to verify that for any edge e and binary variable 
Ik G {0, 1} 

{^^\{Z e ) ak \4>e)=5 aknk 2a e b e . 

In particular, \4>i'' L } is perpendicular to \<f> e ) for any 
edge e, while \4>e' ± ) ^ s perpendicular to Z e \(j> e ) for any 
edge e. First we write Equation [16] in the form 

|$)= ^rest) ® |0S.> ® |0S>, (Bl) 

a6{0,l}® 2 » 

where |0" est ) is a a-dependent product state on all of the 
qubits in the complement of A U B in E, and 

I^a) :=<g)(Z ek ) [Ma K \<t> ek ) =® (Z e J [JtfAal * |0 e J. 
fc=i fc=i 

The states l^fc' -1 ") f° r an y ^3 component bitstring 7 
can now be used to pick out a single term in Equation 
IB11 because 




%)= (j[2a ek b e )j S, 



■7,[M A a] 



and thus 
/ 2g 



2fl 



\fe=i 



(B2) 
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The only value of a for which [Ma a] = [Ma 7] is 
a = 7, because by assumption the square matrix Ma 
has full rank and hence is invertible. Since \4>e k ) is not a 
Z-eigenstate, 2a ek b £k is nonzero for each k. We can show 
that the states {|$e«t)® I^b)} f° r var i° us bitstrings 7 are 
a linearly independent family of states. This follows from 
the assumption of the second set B of non-Z eigenstate 
edges {e' fc } for which A/b has full rank. For we can re- 
peat the above trick to show that each \(j>J est ) <8> |0 B ) has 
a component that is perpendicular to subspace spanned 
by the rest of the \(fl est ) ® |</>b) : 

{{<frest\ ® d)(^ /B7lfc ^l) \€est)®\4>Vl { J J | " ^ • 



fc=l 



The RHS is zero if a 7^ 7, but is a nonzero vector if 
a = 7. So the state |$e*t) ® I^b) nas a component that 
lies along the vector \<j? re3t ) ® ((g) 2 ^ |^f B7]fe,X >), but 

all of the other |</>" est ) <E> |</>b) are orthogonal to it. Thus 
\4>1 es t) ® I^b) cannot be written as a linear combination 
of the others, for each 7. 

Now let |$) = Yf J= i IXi)IX2)-IX|j5|) bc an y other ex- 
pansion of |$) into some number s of product states. 
Write it as 

i*> = Eix j BV A>®ixi>- 




IMa7]».±| | $> 





IXb\a)- 



Comparing this with Equation IB2( we see that for 
each 7 for which is nonzero, \<fij est ) <£> |</>b) can b e 
written as a linear combination of the s states Ix^a) - 
Let D be the number of such nonzero x & 7 . Since each 
Ifirest) ® I^b) * s linearly independent, there must bc 
enough states |x^\ A ) to span a D dimensional space. 
So, s > D. Since this applies to any decomposition of 
the form |$) = J2j=i \Xj)\Xj)— \Xj )> we conclude that 
^Sch(|*» = log 2 D. □ 



Appendix C: Proof of Theorem IV.7I 

Specializing to punctured cylinder codes and the mea- 
surement ordering LtoR allows us to greatly simplify 
Equation l22l We consider two separate cases in turn. 



1. Measurements between holes 

We say that MBQC is "between" two holes when for 
some k, all of the edges in column Xk + are in the set 



E, while all edges in column Xk+i are still in the set E. 
In this subsection we will show that 



Lemma C.l Theorem \ V. 7| holds when computation is 
between holes. 

Proof With the encoding cocycles C' k chosen as depicted 
in Figure [3 then the set A from Equation l22l contains all 
of the values from 2k + 1..2g, and the set B is empty. 
Furthermore, C' k lies entirely within the edge set E for 
k < 2k. Then Equation l22l becomes 



1 29 



7,(5 j=2fc+l 



(CI) 

In section IVAl we saw that the state J2 u es ® 
K^(u)} is the logical +1 X eigenstate |+) associated with 
a surface code on the effective graph G{E\) U G(E 2 ). In 
this setting, graph G(E\) U G(E 2 ) has a natural embed- 
ding on a surface of genus 2k, where the first k holes 
come from the subgraph G{E{) and the second k holes 
come from the subgraph G(Ei). The set of 4fc encoding 
cocycles for a surface code on G(Ei)UG(E 2 ) can be cho- 
sen to bc C' 1 ...C' 2k on the edges E\, along with C' 1 ...C 2k 
on the edges E 2 . Then, the state 

^Z^\K{G{E X )UG{E 2 ))) 

is precisely the encoded X eigenstate \X 11 ,,, l2ky s 1 ...s 2k ) m 
the surface-code space for G(E{) U G(E 2 ). If we further- 
more define 

c 7i---72fc,<5i---<5 2 fc := y ] c Ji---~f2g C S 1 ...8 2 g ^IjJji 

j=2k+l 



72fc + l---72g 
^2k + l---^2g 

e{o,i} 



(C2) 



then the probability of a outcome on the edges in E from 
the original graph is exactly proportional to an inner 
product with a state in the code space of the surface 
code on G(E 1 )UG(E 2 ): 



P 



i)) 



1 



y/2\ dE \- 

E 

7i---72fc 
8i...6 2 k 



■ Y G'(E) , 
c ~ti---l2k,Si---52k\ A 11 ... l2k ,8 1 ...8 2k l- 



(C3) 



Here c is an effective tensor of coefficients in the en- 
coded X-basis for a state in the surface-code space of 
G'(E) := G(^i)UG(^ 2 )- The inner product between this 
state and the product state |0g <E> (j>*~) yields the partial 
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measurement probability. This confirms Theorem IV. 71 
for the cases when computation is between holes. Now, 
we turn to the other stages of MBQC on a punctured 
cylinder code state. 



2. Measurements crossing holes 

If the boundary dE contains vertices in a column be- 
tween x k and Xk + Kk for any fc, then some acrobatics 
are required to keep Equation[22]cxprcssible in the simple 
form of Equation lCll This scenario occurs as the compu- 
tation "crosses holes" from left to right on the lattice G. 
Figure [TTJ below shows the part of a punctured cylinder 
graph G around the k th hole. In particular, we will focus 
on the measurement steps after edge a in Figure [TTJ has 
been measured, but before edge b is measured. Before 
edge a is measured, or after edge b is measured, the sit- 
uation is no more complicated than when computation 
is "between holes" . In this subsection we will show that 
nevertheless, 



Lemma C.2 Theorem \ V.7\ holds when computation is 
crossing holes. 
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FIG. 11: (Color online) The part of a punctured cylinder 
graph around the k th hole. Two stages are depicted, just 
before and just after the edge a is measured. The set E is 
shown in bold, and the vertices in dE are marked by 
circles ( green ) . A choice of the non-trivial cocycles C^t-i 
and C' 2 k that are convenient for each step are shown as 
dotted lines (orange and purple, respectively). 



Proof On the left side of FigurcQTj we show the relevant 
encoding cocycles C' 2k _ 1 and C' 2k , chosen in accordance 
with Figure [5] From this and the LtoR ordering, it is 
clear that as soon as the edge a is measured, the set B is 
no longer empty. Rather, B = {2k — 1} i.e., there exists 
no x e E (E) such that \x n C^-il = 1, yet G' 2k _ x H 
E 7^ 0. This is because there is no cycle that can "wrap 
around" the k th hole without using the edge a or one 
to its left. With B ^ 0, Equation (2D becomes more 
complicated. However, we can avoid this by considering 
the alternative encoding cocycle C' 2k _ 1 depicted on the 



right side of Figure [TT] as soon as the edge a is measured. 
This cocycle is homologous to the hrst (they differ only 
by the bitwise addition of 8 V for a set of vertices v) and 
hence their effect on the surface-code space is identical. 

With C*2 fc _ 1 chosen in this way, we have A = {2k. ..2g} 
and B = 0. Furthermore, G E for all j = I. ..2k - 1. 
Equation takes the form, like Equation lCll 



p{\4>e)) 



2g 



b%\Zl i Z 5 ~ 2 \K(G(E 1 )uG(E 2 ))). 



(C4) 

What remains now is to define a natural embedding of 
the graph G(E\) n G(£ , 2), which requires a more compli- 
cated topology than in the case of measurements between 
holes. To aid in this, we will employ two graph manipu- 
lations that only affect the overlap between \K(G)) and 
a product state up to a constant of proportionality. For 
any connected graph G, we may perform the following 
operations: 

• Edge addition: We may add an edge e to G, then 
measure the qubit associated with the added edge 
to be in the |0) state. The edge can be added be- 
tween existing vertices on G, or by adding a new 
vertex and connecting it to G with the new edge. 
Call the new graph obtained after edge addition G' . 
Then: (O e |Jf(G')> = 75 \K{G)). 

• Vertex splitting: We can split any vertex into two, 
and add an edge e in between the two resultant ver- 
tices. The edges incident on the vertex that is split 
can be divided arbitrarily between the two resul- 
tant vertices. Then measure the new qubit to be in 
the |+) state. Call the new graph obtained by ver- 
tex splitting G 1 . Then: (+ e \K(G')) = -j=\K(G)) 



Using edge addition and vertex splitting [37J , we trans- 
form the graph G(Ei) n G(E 2 ) into an effective graph 
G'(E) that has a natural embedding on a surface of genus 
2k — 1. An example of this is shown in Figure PT2| 

A surface code on G'(E) encodes 4k— 2 qubits. The en- 
coding cocycles C' 1 ...C' 4k _ 2 on the embedded graph G'(E) 
can be chosen as follows: let the hrst 2k — 2 cocycles be 
C'j := C'j applied to the edges E\, and the last 2k — 2 

cocycles be Cj +2k := C'j applied to the edges E 2 . The 
cocycle for qubit numbered 2k — 1 can be chosen as the 
cocycle C 2k _ 1 := C 2k _ 1 applied to the edge set E\. Fi- 
nally the cocycle C' 2k for qubit 2k belongs to the newly 
added edges, as depicted in Figure [T^J 

Let E denote the edges which are added to G\(E) U 
G 2 {E) to construct G'(E), and let \4>g) denote a tensor 
product of the |+) state for each of the horizontal edges 
(added by vertex splitting), and |0) for each of the vertical 
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FIG. 12: (Color online) The graphs G, G(£i) n G(£ , 2 ), and 
G'(E) for a "crossing hole" step of MBQC. The vertical 
nonbold edges of G'(E) (yellow) are measured in the |0) 
state, while the horizontal nonbold edges(red) are measured 
in the |+) state. Encoding cocycles are shown for G and 
G'{E). 



edges (added by edge addition). We can recast Equation 
]as 



1 



y/ 2 \dE\-\E\-l ^ 



(C5) 



where we can take Z~ Z 5 ~ to be 

Ei E 2 



2k-2 



eec' 



0=1 Wc' 



which depends only on the bitwise sum (7 © <5)2fc-i be- 
cause the cocycle C' 2k _ x applied to the edge set E 2 is 
homologous to C' 2k _ 1 on the graph G'(E). So, if both 
72ft- 1 an d <?2fc— 1 are equal to one, there is no overall ef- 
fect on the state \K(G'(E)). 

Now, since all of the edges in the set C' 2k are mea- 
sured in the state |0), we may insert the operator Z 2 k '■= 
rieeC' ZJ' lh with impunity. Then 

%4 2 II Z^\K{G\E)) 

is precisely the encoded X eigenstate 

-G'(E) x 



X 



FIG. 13: (Color online) The graphs G and_G'(£) during a 
stage of MBQC where G^ is split across E and E. 



in the surface-code space of G'(E). If we now define 



E 



C 7l—72fc-2,(7ffi'5)2fc-l,72fc---72 g 



72fc + l---72g 
<5 2 fc-l ■■■<52g 

C *Si...S 2g 1 I ^7i.*fi 
j=2ft 



(C6) 



then the probability of a outcome on the edges in E from 
the original graph is exactly proportional to an inner 
product with a state in the code space of the surface 
code on G'(E): 



>e)) 



1 



G'(B) 

71— 72*1*51—152*- 



7i— 72* 

(5l...<5 2 *-2 



(C7) 



which again takes the form of the inner product between 
a surface-code state and product state. One can find a 
suitable G'(E) to put p (\<f>-)) into the form of Equation 
IC7I at all MBQC stages while crossing a hole; we have 
shown just one example of such a stage. During later 
stages the encoding cocycle C' 2k will be split across the 
measured and unmeasured edges: C' 2k H E 7^ and C' 2k fl 
E 7^ 0. However, we can always still "complete" the 
partial cocycle C' 2k fl E from G to a cocycle C' 2k on G'(E) 
by adding edges from E that are measured in the |0) 
state. An example of this is shown in Figure Q2] Note 
that given our ordering of measurements, there still exists 
an x € Eq(E) such that \x fl C' 2k \ = 1 until the edge 
b from Figure [TT1 is measured. Yet, once b is measured 
C 2k € E 1 , so 2fc ^ B and Equation [C3 holds for all stages. 
This completes the proof of Theorem IV. 71 for all stages 
of computation. 



Appendix D: MBQC with the states |G a ) 



7l—72fc-2,(7ffi<5)2fc-l,72fc,<5l---<52fc- 



With Theorem IV. 7( we have reduced the problem of 
simulating MBQC on punctured cylinder code states 
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with LtoR to the evaluation of an inner product 



(<j>(G'(E))\ 




(Dl) 



where G'(E) is an effective lattice of genus g' = 2k 
or 2k — 1, k is the number of holes in the set of 
qubits that have already been measured, and \4>{G'(E))) 
is a product state. Recall that in the associated en- 
coded X-eigenbasis(corresponding to a canonical polygo- 
nal schema), the state \C a ^) has coefficients 



1 9 

_ ^Q(_i)" J ft+("©7) 3 (/3ep) Jj 



j'=i 

where the notation c 7 . p separates the odd and even num- 
bered encoded qubits into two g-component bitstrings 7 
and p. Here we will show that for MBQC with punc- 
tured cylinder code states |(7 a " 8 }, 
this same form, and thus the state 



the tensor c 7iP takes 



E 



c. \X G ' {E) ) 



7,pG{0,l}®9' 

in Equation ID1I can be interpreted as a state \C a ,/3 ) in 
the code space of the surface code on the effective graph 
G'(E), for some a', (3' G {0, l}® 9 '. Then the efficiency of 
sampling follows by Equation QTJ Here the notation as- 
sociates 7 with the even numbered qubits and p with the 



odd: e.g. 
with Equations IC3I and IC4 



-7liPl.72.-Pg 



, (note the possible confusion 



To verify the above claim, we begin with the case where 
computation is between holes. Using the definition of 
the c coefficients (Equation IC2j) . after the summation 
c 11 ... lk s 1 ...s k , Pl ... Pk e 1 ...e k works out to be: 

k 

i_ JJ^_ 1 - ) ai/3 3 +(ae7) 3 (/J©p)i(_X)a J ft+(a©'5)j(/3©e)i_ 



2 2k 

This is exactly the tensor of coefficients for the state 
\C a ) in the code space of a punctured cylinder code 
with 2k slots, labelled by bitstrings that are symmetric 
between the first and last k entries: a' := a&a,/3' := 
/3&/3, where & denotes concatenation. The encoded Z 
cocycles are again those of a canonical encoding scheme, 
so local overlaps with | C a >@ ) can be computed efficiently 
in \E\ and g. 

When crossing holes, we perform the summation of 
Equation [C6] for c 7l ...^ k s 1 ...s k _ 1 , Pl ... Pk e 1 ...e k ^ 1 to obtain: 

1 fc-i 

_£_ j~J ^_ 1 )(affi7)i(/3ffip) 3 (_]_)(ae«)i(/3ee)j 



2 2k- 



^_ 1 -j(Q07©<5)fc(/3©p)fc ^_^^(a©5) fc (/3ep)fc 

<5 fc e{o,i} 
1 fc-i 

±_ TT(_]_)(affi7)f(/8®p)i(_l)(ae«)i(/8ffle)j 
3=1 

which is again the tensor describing 1,3 ) in the 
code space of the surface code for G'(E), where a' := 
ax, ...afe_i,0, ai, ...ak-i and /?' := j3i,.../3k,/3i.../3k-i- □ 
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